-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 31 May 2020 20:59:43 +0200 Source: ssvnc Architecture: source Version: 1.0.29-3+deb9u1 Distribution: stretch Urgency: medium Maintainer: Magnus Holmgren <holmgren@debian.org> Changed-By: Mike Gabriel <sunweaver@debian.org> Closes: 945827 Changes: ssvnc (1.0.29-3+deb9u1) stretch; urgency=medium . * Non-maintainer upload by the LTS team. * Porting of libvncclient security patches (Closes: #945827): - CVE-2018-20020: heap out-of-bound write vulnerability inside structure in VNC client code. - CVE-2018-20021: CWE-835: Infinite loop vulnerability in VNC client code. - CVE-2018-20022: CWE-665: Improper Initialization vulnerability. - CVE-2018-20024: null pointer dereference that can result DoS. Checksums-Sha1: 55558f3f57693db3c45eacacf09cf1fc60d6ee4c 1946 ssvnc_1.0.29-3+deb9u1.dsc 3236fab26e43561625c1d9fa81a212a1d9975d9c 13196 ssvnc_1.0.29-3+deb9u1.debian.tar.xz 13a59471b473e70de2a01c67b4b5d69a7ddb017c 9993 ssvnc_1.0.29-3+deb9u1_source.buildinfo Checksums-Sha256: 98d7f88760053e50dc9fa338bfd6ddf8319a2c02b22f123dd0c5dcfec08a5e99 1946 ssvnc_1.0.29-3+deb9u1.dsc cd259bc9f99d3ee0747f9dd74a5176a1322083b8f724d08da54ce9724698fb14 13196 ssvnc_1.0.29-3+deb9u1.debian.tar.xz 4c6e3e9a298d5712b17dc8a1f52848848344f86b4354cb16e3fdbe970ee350ce 9993 ssvnc_1.0.29-3+deb9u1_source.buildinfo Files: c461cf0cec91ca18789002b0e919ddea 1946 net extra ssvnc_1.0.29-3+deb9u1.dsc 3dd3bf4f063ede8127c660489b1e9c7b 13196 net extra ssvnc_1.0.29-3+deb9u1.debian.tar.xz 859520c6bf556a00f5a9cef43c2b790e 9993 net extra ssvnc_1.0.29-3+deb9u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJJBAEBCAAzFiEEm/uu6GwKpf+/IgeCmvRrMCV3GzEFAl7T/40VHHN1bndlYXZl ckBkZWJpYW4ub3JnAAoJEJr0azAldxsxob8P+wR+vsCJoi1guKf1dR/x5ncjSuiQ cIwtelOxPnFG8iuk8jas/IhD+IsNfRYFVPraZAkj00lmBLKbDWftsx+IXr5rqeWW tIC3lFg5DOLfJ5xWjhY+Lt02OL+qRIk3cZprU0Fy526N2k6Z6qn6gay4mhzg85g5 do7CU0qu5Z98S6+iX67qGQ9SJKFQyzka4Tbj93YMRttSGGnM4mnZLjuPMBiQvSfN we6QLB2rdmUa0KJVML8hAmmOfL3u/VVMYTbFIiHD33DpVc4Td83AdXR7aOG8BfI/ Fy0UxU1+z2LMiZdD+OwWcWVRvY82fYxDJIcejpLvG4xGheVopDv3xawuYNNKWhHp DwWJXBvkIQVvPGBVW0W0gjz7FM+OcHiBGfpy2D6WxSc/IYxLShgsd1p8NkeAPYG2 W4IuLqtU4/Fbeu7ZJvgf9vZ26wjpoSUqvhCvehKgMcPMlHsEeIisGpEM2x5pynow fqiNebrGl0DGUj/xA/yu+FNqApkiXQok2lAJ4JyLMEppGbAAzyuKqZMXg9F6E/iU 55A7CDYTv6/M8BfBbDOLp9pBTarLZwFhjbywxlW5PFouBkZxODFAkoyAbHLxtosi OYGqpg/U9KxECtXvjg40DN53kwJtksz+OL92gM60LjyazrRtq6eYlVEGrzI10RzU LsOXDgJIWdooP24Z =pe98 -----END PGP SIGNATURE-----
